Global platform for managing subscriber identity modules

ABSTRACT

Disclosed is method comprising: storing in a home location register (HLR) at least one subscription record of a mobile device of the plurality of mobile devices, the mobile device having a subscriber identity module (SIM) identified by a currently activated first international mobile subscriber identity (IMSI), the currently activated first IMSI belonging to a set of IMSIs allocated to the system, wherein the provisioning server is operative to: receive a notification that the mobile devices has moved into a first one of the wireless networks; confirm that an allocation rule is satisfied; add and activate a second one of the IMSIs in the set of IMSIs to the HLR and remove the currently activated first IMSI from the HLR; and send the second IMSI to the mobile device to enable the mobile device to communicate wirelessly in the first wireless network as a local device.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No.13/413,516 entitled Global Platform for Managing Subscriber IdentityModules filed on Mar. 6, 2012 and issued as U.S. Pat. No. 8,478,238 onJul. 2, 2013 which is based upon and claims the benefit of priority forprior Provisional Patent Application No. 61/567,017 filed on Dec. 5,2011. U.S. patent application Ser. No. 13/413,516 is acontinuation-in-part of co-pending U.S. patent application Ser. No.11/804,582 entitled WIRELESS COMMUNICATION PROVISIONING USING STATETRANSITION RULES filed May 18, 2007, a continuation-in-part of U.S.patent application Ser. No. 11/398,493 entitled SELF PROVISIONING OFWIRELESS TERMINALS IN CELLULAR NETWORKS filed Apr. 4, 2006 and issued asU.S. Pat. No. 4,498,615 on Jul. 30, 2013, which is acontinuation-in-part of U.S. patent application Ser. No. 11/119,401entitled SELF PROVISIONING OF WIRELESS TERMINALS IN CELLULAR NETWORKSfiled Apr. 29, 2005 and issued as U.S. Pat. No. 8,346,214 on Jan. 1,2013. This application is also a continuation in part of U.S. patentapplication Ser. No. 11/398,493 entitled SELF PROVISIONING OF WIRELESSTERMINALS IN CELLULAR NETWORKS filed Apr. 4, 2006 and issued as U.S.Pat. No. 8,498,615 on Jul. 30, 2013, which is a continuation-in-part ofU.S. patent application Ser. No. 11/119,401 entitled SELF PROVISIONINGOF WIRELESS TERMINALS IN CELLULAR NETWORKS FILED Apr. 29, 2005 andissued as U.S. Pat. No. 8,346,214 on Jan. 1, 2013. This presentapplication is also a continuation in part of co-pending U.S. patentapplication Ser. No. 11/804,582 entitled WIRELESS COMMUNICATIONPROVISIONING USING STATE TRANSITION RULES filed May 18, 2007, the entirecontents of which are incorporated herein by reference.

BACKGROUND OF THE INVENTION

In a wireless system, the wireless terminal has a Subscriber IdentityModule (SIM), which contains the identity of the subscriber. One of theprimary functions of the wireless terminal with its SIM in conjunctionwith the wireless network system is to authenticate the validity of thewireless terminal (for example, a cell phone) and the wirelessterminal's subscription to the network. The SIM is typically a microchipthat is located on a plastic card, a SIM card, which is approximately 1cm square. The SIM card is then placed in a slot of the wirelessterminal to establish the unique identity of the subscriber to thenetwork. In some cases, the wireless terminal itself contains thesubscriber identification and authentication functionality so that aseparate SIM and/or SIM card is not utilized.

In the SIM (or within the wireless terminal) an authentication key and asubscriber identification pair are stored. An example of such a pairwould be the authentication key Ki as used in GSM networks and theassociated subscriber identification IMSI (International MobileSubscriber Identity). Another example would be the authentication keyA-Key and subscriber identification MIN (Mobile Identification Number)as used in CDMA and TDMA networks. In either case, a correspondingidentical set of an authentication key and a subscriber identificationare stored in the network. In the SIM (or in the wireless terminal) andwithin the network, the authentication functionality is run using thelocal authentication key and some authentication data which is exchangedbetween the SIM and the network. If the outcomes of running theauthentication functionality in the SIM and in the network leads to thesame result, then the SIM/wireless terminal are considered to beauthenticated for the wireless network.

In existing wireless systems, a SIM (or wireless terminal) has anauthentication key associated with only one subscriber identificationand this subscriber identity is typically tied to a local region ornetwork. When a SIM (or wireless terminal) authenticates in a regionthat is not local or with a network that is not local, then usually theSIM (or wireless terminal) needs to pay additional roaming servicecharges to connect with the wireless network. It would be beneficial ifthe SIM (or wireless terminal) were not permanently tied to a localregion or network. For example, equipment vendors would then be able tosell the same equipment in multiple regions and for multiple networkswith one physical SIM card. Additionally, end users may avoid roamingservice charges or at least more favorable subscription terms may beavailable.

BRIEF DESCRIPTION OF THE DRAWINGS

Various embodiments of the invention are disclosed in the followingdetailed description and the accompanying drawings.

FIG. 1 illustrates an embodiment of a self-provisioning wireless system.

FIG. 2A illustrates an example of authentication data structures in oneembodiment.

FIG. 2B illustrates an example of authentication data structures inanother embodiment.

FIG. 3 is a flow diagram illustrating an embodiment of a process foracquiring wireless service from a wireless network.

FIG. 4A illustrates an embodiment of a process for provisioning orauthentication of a wireless terminal in a network system.

FIG. 4B illustrates another embodiment of a process for provisioning orauthentication of a wireless terminal in a network system.

FIG. 5 illustrates an embodiment of a process for self-provisioning orauthentication, of a wireless terminal in a network system.

FIG. 6 is a flow diagram illustrating an embodiment of a process foracquiring wireless service from a wireless network.

FIG. 7 illustrates a block diagram of an embodiment of a system formobile data communication provisioning.

FIG. 8 is a flow diagram illustrating an embodiment of a process formobile data communication provisioning.

FIG. 9 is a block diagram illustrating an embodiment of a statedefinition.

FIG. 10 illustrates an embodiment of a state transition rule definition.

FIG. 11 is a flow diagram illustrating an embodiment of states of achannel sale model for provisioning and the transitions between thestates.

FIG. 12 is a flow diagram illustrating an embodiment of states of aretail sale model for provisioning and the transitions between thestates.

FIG. 13 is a flow diagram illustrating an embodiment of a process forprovisioning wireless communication.

FIG. 14A is an embodiment of a wireless network architecture in which aglobal platform provider operates.

FIGS. 14B and 14C are two examples of IMSI switching when a mobiledevice roams from a home network to a visited network.

FIG. 15 illustrates an overview of IMSI provisioning and management.

FIG. 16 illustrates an embodiment of a process for activating a mobiledevice having a bootstrap IMSI.

FIG. 17 illustrates a process for performing IMSI switching.

FIG. 18 illustrates an embodiment of a process for operating the mobiledevice after IMSI switching.

FIG. 19 illustrates an embodiment of a process for operating the mobiledevice as a roaming device after IMSI switching.

FIG. 20 illustrates an embodiment of a process for performing anotherIMSI switching.

DETAILED DESCRIPTION

The invention can be implemented in numerous ways, including as aprocess, an apparatus, a system, a composition of matter, a computerreadable medium such as a computer readable storage medium or a computernetwork wherein program instructions are sent over optical, electronicor wireless communication links. In this specification, theseimplementations, or any other form that the invention may take, may bereferred to as techniques. A component such as a processor or a memorydescribed as being configured to perform a task includes both a generalcomponent that is temporarily configured to perform the task at a giventime or a specific component that is manufactured to perform the task.In general, the order of the steps of disclosed processes may be alteredwithin the scope of the invention.

A detailed description of one or more embodiments of the invention isprovided below along with accompanying figures that illustrate theprinciples of the invention. The invention is described in connectionwith such embodiments, but the invention is not limited to anyembodiment. The scope of the invention is limited only by the claims andthe invention encompasses numerous alternatives, modifications andequivalents. Numerous specific details are set forth in the followingdescription in order to provide a thorough understanding of theinvention. These details are provided for the purpose of example and theinvention may be practiced according to the claims without some or allof these specific details. For the purpose of clarity, technicalmaterial that is known in the technical fields related to the inventionhas not been described in detail so that the invention is notunnecessarily obscured.

Provisioning of Subscriber Identifications to Wireless Terminals inWireless Networks

A system and method for provisioning a subscriber identification to awireless terminal in a wireless network is disclosed. A control center(in which one or more control servers are located) receives transmissionfrom a wireless network. The transmission indicates that a wirelessterminal is roaming outside its home network. The control centerprovisions a new subscriber identification to the wireless terminal,where the subscriber identification is selected based at least in parton the identification of the visited wireless network in which thewireless terminal is roaming and a server database that providesprescribed subscriber identification(s) for a given visited network.Using the newly-provisioned subscriber identification, the wirelessterminal acquires wireless service from the serving wireless network asa local wireless terminal or as a different visiting wireless terminalbased on the server's prescription of subscriber identity for theparticular visited network. The wireless terminal can operate as a localwireless terminal for that network, or for a network with which the homenetwork of the new subscriber identity has a preferred relationship. Thewireless terminal can acquire telecommunications service as a local orvisiting terminal by using a stored set of authentication key-subscriberidentification that is specific to the network it is operating in or thehome network of the new subscriber identity. In various embodiments, thewireless terminal can operate as a local or visiting terminal byreceiving or downloading a specific set of authentication key-subscriberidentification, or by receiving or downloading a subscriberidentification to pair with an existing authentication key.

FIG. 1 illustrates an embodiment of a wireless system. In the exampleshown, the wireless system includes a plurality of wireless terminals,represented in FIG. 1 by wireless terminal 100, a plurality of wirelessnetwork base stations, represented by wireless network base stations104, wireless network center 106, Home Location Register/AuthenticationCenter (HLR/AuC) 108, and provisioning server 110 capable ofprovisioning the wireless terminals. Although only one wireless networkcenter 106 is shown, it is understood that the wireless system caninclude multiple wireless network centers 106. Each wireless networkcenter 106 includes, or is associated with, a HLR, a Mobile SwitchingCenter/Visitor Location Register (MSC/VLR), a Short Message ServiceCenter (SMSC), and a Serving GPRS Service Node (SGSN), or Packet DataServing Node (PDSN). In one embodiment, the multiple wireless centers106 may be operated by different network carriers, while HLR/AuC 108 andprovisioning server 110 are operated by a global platform provider i.e.,a control center. Wireless terminal 100 includes a Subscriber IdentityModule (SIM) which is either an attachable hardware card with a memoryand a processor or a software object embedded in the wireless terminal.Wireless terminal 100 communicates with wireless network base stations104 using wireless signal 102. As a wireless terminal moves around itcommunicates with different wireless base stations. Wireless networkbase stations 104 communicate with wireless network center 106.

Communications from a wireless terminal are passed to another wirelessterminal over the same wireless network using a local wireless networkbase station to the other wireless terminal or the communications arecarried by a wired network or other wireless network to the destinationterminal. Wireless network center 106 communicates with its associatedHLR, where sets of authentication key-subscriber identification arestored, to help in authenticating a wireless terminal that is acquiringwireless network service. One example of a subscriber identification isan international mobile subscriber identifier (IMSI). Wireless networkcenter 106 and its associated HLR communicate with provisioning server110 to enable a wireless terminal to acquire a new subscriberidentification over the air (OTA) that is paired with an existingauthentication key and/or a new set of authentication key-subscriberidentification. In some embodiments the transmission of theauthentication key or the authentication key-subscriber identificationis encrypted. In various embodiments, the authentication key or theauthentication key-subscriber identification is/are decrypted at thewireless terminal and/or in the SIM card. The old authentication key-newsubscriber identification pair and/or the new set of authenticationkey-subscriber identification are added in the appropriate manner to theHLR/AuC 108 databases or the HLR databases associated with wirelessnetwork centers 106 so that the wireless terminal can be authenticatedand can acquire wireless network service using the new subscriberidentification and/or authentication key set. In various embodiments,the wireless network system is a cellular system, a GSM/GPRS wirelesssystem, a CDMA or WCDMA wireless system, or a TDMA wireless system, orany other type of wireless network system.

FIG. 2A illustrates an example of authentication data structures in oneembodiment. In some embodiments, the authentication data structure for awireless terminal is located in the SIM, and for the network in theHLR/AuC such as HLR/Auc 108 of FIG. 1 or the HLR associated withwireless network centers 106. An authentication data structure (ADS) fora wireless terminal includes an authentication key (AK) and one or moresubscriber identifications (SI) and is used to help authenticate awireless terminal for a wireless network. In the example shown, the ADSfor wireless terminal 1 includes one authentication key and onesubscriber identification. The ADS for wireless terminal 2 includes oneauthentication key and three subscriber identifications. The ADS forwireless terminal N includes one authentication key and two subscriberidentifications. The ADS for network includes the authenticationkey-subscriber identification entries for each of the wirelessterminals. Entries for wireless terminal 1, 2, and N are shown. In someembodiments, there are more than one authentication keys where eachauthentication key has multiple subscriber identifications.

FIG. 2B illustrates an example of authentication data structures inanother embodiment. Authentication data structure (ADS) for a wirelessterminal includes a Ki and one or more IMSI's. In the example shown, theADS for wireless terminal 1 includes one Ki and one IMSI. The ADS forwireless terminal 2 includes one Ki and three IMSI's. The ADS forwireless terminal N includes one Ki and two IMSI's. The ADS for HLR/AuCincludes the Ki-IMSI entries for each of the wireless terminals. Entriesfor wireless terminal 1, 2, and N are shown.

FIG. 3 is a flow diagram illustrating an embodiment of a process foracquiring wireless service from a wireless network. In some embodiments,the process of FIG. 3 is implemented on a wireless terminal such aswireless terminal 100 in FIG. 1. In the example shown, in 300 a wirelesssignal is received from a wireless network. A wireless terminal receiveswireless signals from a nearby network base station. In 302, a networkidentification is decoded from the wireless signal. The wireless signalincludes a mobile network identification. For example, the wirelessterminal scans for the existing wireless system signals. When it finds anetwork system broadcast control channel (e.g. BCCH in GSM Systems), itdecodes the broadcasted information to decode the Location AreaIdentifier (LAI). The LAI is composed of a mobile country code, a mobilenetwork code and a location area code. From the LAI, the wirelessterminal can determine the country in which it is operating. In 304, asubscriber identification is selected based on the decoded networkidentification. For example, LAI information can be matched with thesubscriber identification of the wireless terminal, which includes amobile country code, a mobile network code, and a mobile subscriberidentification number. In various embodiments, the LAI mobile countrycode and subscriber identification mobile country code are matched orthe LAI mobile network code and the subscriber identification mobilenetwork code are matched. In various embodiments, the selection of asubscriber identification is based at least in part on the pricing ofdifferent wireless networks, the billed account for that connection, abilled account for the wireless service, the application that will usethe connection, an application using the wireless service (for example,one subscriber identification for data communication and a differentsubscriber identification for voice communication) or any otherappropriate criteria for selecting a subscriber identification. In 306,wireless service is acquired from the wireless network.

FIG. 4A illustrates an embodiment of a process for provisioningsubscriber identification to a wireless terminal in a network system.Referring also to FIG. 1, in the example shown, wireless terminal 100receives information from and transmits information to wireless networkcenter 106 (and its associated HLR), HLR/AuC 108, and provisioningserver 110 using wireless signals 102. As shown in FIGS. 4A and 4B,wireless network center 106 (and its associated HLR), HLR/AuC 108, andprovisioning server 110 are collectively identified by numeral 402. In404, wireless terminal 100 listens to wireless signals 102 transmittedfrom network base stations 104 and decodes the mobile networkidentification from the transmitted information. For example, thewireless terminal scans for the existing wireless system signals. Whenit finds a network system broadcast control channel (e.g. BCCH in GSMSystems), it decodes the broadcasted information to decode the LocationArea Identifier (LAI). The LAI is composed of a mobile country code, amobile network code and a location area code. From the LAI, the wirelessterminal can determine the country in which it is operating. Thewireless terminal receives a set of Subscriber Identification fromnetwork center, HLR/AuC, and provisioning server 402 and stores in itsADS. In 406, the wireless terminal chooses a Subscriber Identificationwith the same country code from its ADS. For example, the SubscriberIdentification is composed of a mobile country code, a mobile networkcode, and mobile subscriber identification number. The codes in theSubscriber Identification can be used to match a SubscriberIdentification to the local network and/or country. The rest of theSubscriber Identifications stored in the wireless terminal's ADS may bemade inactive for the duration of the session.

In 408, the wireless terminal performs a location update with thevisited wireless network using the new Subscriber Identification. In410, the network center, HLR/AuC, and provisioning server 402 searchesfor the Subscriber Identification in its ADS and retrieves thecorresponding Authentication Key. In 412, a challenge is generated(RAND) and with the Authentication Key is used to calculate a Response(SRES) using an authentication algorithm (A3). In 414, the RAND is sentto the wireless terminal and a response is requested. In 416, thewireless terminal uses the RAND with the Authentication Key from its ADSto independently calculate a SRES using encryption algorithm (A3) storedin its SIM. In 418, the SRES is sent to the network center and/orHLR/AuC and/or provisioning server 402. In 420, authentication is passedif the received SRES matches the locally computed SRES, otherwise theauthentication fails.

FIG. 4B illustrates another embodiment of a process for provisioningsubscriber identification to a wireless terminal in a network system. Insome cases, the wireless terminal will not contain an IMSI that matchesthe country code of the local network system. The wireless terminal canconnect to the network using an IMSI with another country code and thenreceiving or downloading a local IMSI (i.e. with a matching countrycode) or a new visiting IMSI. In the example shown, wireless terminal400B receives information from and transmits information to the networkcenter and on to the HLR/AuC of the home network of the currently activeIMSI using cellular signals. The home network HLR/AuC transmits thenetwork registration information of the roaming subscriber to theprovisioning server 402B. In 404B, wireless terminal 400B listens tocellular signals transmitted from network towers and decodes the countrycode from the transmitted information. In 406B, wireless terminal 400Bcommunicates with the HLR/AuC of the home network of the currentlyactive IMSI and is authenticated. The home network HLR/AuC transmits thenetwork registration information of the roaming subscriber to theprovisioning server transmitting information including a visitedcountry/network code and a terminal producer. In 408B, the provisioningserver chooses a new IMSI with a local country/network code or other newcountry/network code. In 410B, the new IMSI is added to the ADS of theHLR/AuC (or the HLR associated with the network system) by theprovisioning server corresponding to the wireless terminal (i.e. pairedwith the wireless terminal's Ki). In 412B, the provisioning server sendsthe new IMSI to wireless terminal 400B; OTA e.g., via a SMSC. In 414B,wireless terminal 400B adds the new IMSI to its ADS. In 416B, wirelessterminal 400 reestablishes its connection with the network system withthe new IMSI as the active IMSI. In some embodiments, depending on theinformation transmitted (i.e. IMSI range or type of wireless terminal),communication may be established between the wireless terminal and aspecific application server (i.e., a global platform provider'sprovisioning server or another server). In some embodiments, thiscommunication with a specific application server is encrypted.

FIG. 5 illustrates an embodiment of a process for provisioningsubscriber identification to a wireless terminal in a network system. Insome embodiments, the wireless terminal will not contain a SubscriberIdentification that matches the network code and/or country code of thelocal network system. The wireless terminal can connect to the networkusing a Subscriber Identification with another network/country code andthen receiving downloading a local Subscriber Identification (i.e. witha matching country code) or a new visiting Subscriber Identification.Referring also to FIGS. 1 and 4A, in the example shown, wirelessterminal 100 receives information from and transmits information tonetwork center 106 (and its associated HLR) and on to HLR/AuC 108 of thehome network of the currently active Subscriber Identification. The homenetwork HLR/AuC transmits the network registration information of theroaming subscriber to provisioning server 110. In 504, wireless terminal100 listens to wireless signals transmitted from network base stations104 and decodes the mobile network identification from the transmittedinformation similar to 404 of FIG. 4A. In 506, wireless terminal 100communicates with the HLR/AuC of the home network of the currentlyactive Subscriber Identification and is authenticated, using a processsimilar to 408-420 of FIG. 4A, with the provisioning server 110transmitting information including a visited country/network code and aterminal producer. In 508, the provisioning server 110 chooses a newSubscriber Identification with a local country code and/or network code,or a new visiting Subscriber Identity. In 510, the new SubscriberIdentification is added to the ADS of the HLR/AuC 108 or the HLRassociated with the visited network corresponding to the wirelessterminal (i.e. paired with the wireless terminal's Authentication Key).In 512, the provisioning server 110 sends the new SubscriberIdentification to wireless terminal 500; OTA e.g., via a SMSC. In 515,wireless terminal 100 adds the new Subscriber Identification to its ADS.In 516, wireless terminal 100 reestablishes its connection with thenetwork system with the new Subscriber Identification as the activeSubscriber Identification. In some embodiments, depending on theinformation transmitted (e.g., subscriber identification range or typeof wireless terminal), communication may be established between thewireless terminal and a specific application server (e.g., a globalplatform provider's provisioning server or another server). In someembodiments, this communication with a specific application server isencrypted.

FIG. 6 is a flow diagram illustrating an embodiment of a process foracquiring wireless service from a wireless network. In the exampleshown, in 600 a wireless signal is received from a wireless network. In602, wireless service is acquired from the wireless network using afirst subscriber identification. In 604, information is transmitted tothe wireless network. In 606, a second subscriber identification, whichis selected by an application server (or provisioning server 110 of FIG.1), is received. The second subscriber identification is selected basedat least in part on one or more of the following: the wireless network,the wireless network identification, the base station that the wirelessterminal is communicating with, the local country associated with thenetwork, or any other appropriate criteria for selecting a subscriberidentification. In various embodiments, the first subscriberidentification and the second subscriber identification are both pairedwith a single authentication key or the first subscriber identificationis paired with a first authentication key and the second subscriberidentification is paired with a second authentication key. In someembodiments, a second authentication key is received. In variousembodiments, the subscriber identification and/or the authentication keyare received after having been encrypted and need to be decrypted afterhaving been received. In some embodiments, the subscriber identificationis encrypted and decrypted using an authentication key. In variousembodiments, a subscriber identification and/or a authentication key isencrypted in an application server, in a provisioning server, in awireless network server, or in a combination of anapplication/provisioning server and a wireless network server, or in anyother appropriate place for the encryption. In various embodiments, asubscriber identification and/or an authentication key is decrypted in awireless terminal, in a SIM card, or in a combination of the SIM cardand the wireless terminal, or in any other appropriate place for thedecryption. In some embodiments, authentication information isreceived—for example, a random number that has been encrypted using anauthentication key, a subscriber identification that has been encryptedusing an authentication key, or other information that has beenencrypted using an authentication key or other appropriate key. In 608,wireless service is acquired from the wireless network using the secondsubscriber identification.

Wireless Communication Provisioning Using State Transition or AllocationRules

Wireless communication provisioning using state transition or allocationrules associated with an identifier is disclosed. A first stateassociated with one or more identifiers is defined. A second stateassociated with one or more identifiers is defined. A state transitionor allocation rule is defined between the first and second states. Insome embodiments, the one or more identifiers are stored in a subscriberidentity module (SIM). In some embodiments, the one or more identifiersare IMSIs. In some embodiments, a plurality of states are defined, aplurality of state transition or allocation rules are defined, and agroup of states and transition/allocation rules are selected andassociated with one or more identifiers. In some embodiments, wirelesscommunications comprise mobile data, mobile cellular communications, orany other appropriate wireless communications.

In some embodiments, a customer organization defines a sequence ofstates for devices that communicate data with a global platformprovider's application server via one or more wireless carrier networks.The provider (e.g., the global platform provider) enables thecommunication via the wireless carrier networks. The plurality of statesenables the activity of provisioning of a customer device or providerdevice used in the data communication with appropriate billing, access,and/or authorization for each activity especially with regard totesting, activation, deactivation, etc.

FIG. 7 illustrates a block diagram of an embodiment of a system formobile data communication provisioning. In the example shown, device 700comprises a mobile device that communicates data. Device 700 includes amobile data service (MDS) 702—for example, general packet radioservice—and an identifier (ID) 704—for example, a subscriber identifier(such as IMSI). Data can be transmitted and received by device 700 usingMDS 702. Device 700 is identified using ID 704 and associated with auser or customer. Transmissions and receptions of data communicate withcarrier network 712, which is associated with MDS 702. In variousembodiments, the carrier network associated with MDS 702 comprises amobile carrier network, a cell phone network, a messaging network,wireless communication network, or any other appropriate network forcommunicating data to a mobile device.

Carrier network 712 includes carrier switching network 710 (e.g.,SGSN—serving General Packet Radio Services (GPRS) support node—used inGlobal System for Mobile Communications (GSM) networks), carrier datatraffic handler 708 (e.g., GRX—a GPRS roaming exchange and/orSS7—signaling system 7 system), and a plurality of carriertowers—represented in FIG. 7 by tower 706. Communications of datatraffic to and from device 700 are received by carrier network 712 by acarrier tower, which communicates the data traffic with carrier datatraffic handler 708. Carrier data traffic handler 708 communicates datatraffic with carrier switching network 710. Carrier switching network710 can communicate with network 714, and Authentication Center/HomeLocation Register (HLR) 728 and Authentication, Authorization, andAccounting (AAA) Server (e.g., a Radius server) 730 of provider system724. In one embodiment, provider system 724 is operated by a globalplatform provider as a control center.

Network 714 enables communication with customer system 716, whichincludes customer application server 718 and customer administrator 720.In some embodiments, network 714 comprises the internet, a local areanetwork, a wide area network, a wired network, a wireless network, orany other appropriate network or networks for communicating withcustomer system 716. Customer application server 718 receives data fromand transmits data to device 700 regarding the customer's services orproducts. In various embodiments, the customer's services includestransaction related services, monitoring services, and/or locationtracking services. In some embodiments, a state transition rule orallocation defining transition from one provisioning state to anotherprovisioning state associated with device 700 is implemented on customerapplication server 718. In some embodiments, a state transition orallocation rule defining transition from one provisioning state toanother provisioning state associated with device 700 is not known todevice 700.

Provider system 724 includes HLR 728, AAA server 730, application server726, database (DB) 732, administrator 734. In an embodiment where theprovider system 724 is the control center of a global platform provider,application server 726 can perform the function of a provisioningserver, such as provisioning server 110 of FIG. 1, in addition to otherfunctions. Provider system 724 enables customer services by enablingdata communication services via the carrier network with device 700. HLR728 enables communication with the provider system by indicating ifdevice 700 is allowed to have data communication through carrier network712 with customer system 716. AAA server 730 enables specificpermissions that are available regarding data communications betweendevice 700 and customer system 716 via carrier network 712. Applicationserver 726 enables provisioning and billing for the provider.Provisioning comprises enabling devices such as device 700 to havemobile data communication services using a mobile carrier network. DB732 includes information related to provisioning and billing for theprovider. Administrator 734 administrates provider system. Customersystem administrator 720 communicates with provider application server726 to administrate customer system usage, billing, provisioning fordata communication service of carrier network 712 enable by provider724. In some embodiments, functionality of HLR 728 and AAA server 730are performed by the same server, are partitioned between two serversbut not exactly as described herein, or any other server configurationto achieve the same functionality.

FIG. 8 is a flow diagram illustrating an embodiment of a process formobile data communication provisioning. In some embodiments, the processof FIG. 8 helps provision device 700 of FIG. 7 such that mobile dataand/or wireless communications is available via carrier network 712 tocustomer system 716. In the example shown, in 800 states associated withone or more identifiers are defined. States that are associated with oneor more identifiers can include test ready, inventory, activation ready,activated, deactivated, retired, return merchandise authorization (RMA),suspend, fraud review, purged, and/or any other appropriate states. Invarious embodiments, the identifier can be an International Circuit CardIdentifier (ICCID), an international mobile subscriber identifier(IMSI), a customer identifier, a user identifier, or a deviceidentifier. In various embodiments, the one or more identifierscomprises an identifier associated with a user, a customer, a company,an organization, etc. or a group of identifiers associated with a user,a customer, a company, an organization, etc.

In some embodiments, one or more states are based on the lifecycle ofthe service of a wireless communication device.

A test ready state can be used to allow a manufacturer to test a SIM, ora device with a SIM, and its network communication infrastructure beforedelivering the SIM, or device with a SIM, to an end user, a retaillocation, or a distributor. A test ready state can be a default statefor a SIM that allows authentication and authorization with a globalplatform provider's HLR and AAA server, but does not have any billingassociated with it. A SIM in a test ready state is able to conditionallytransact data, voice, and/or Short Message Service (SMS)communications—for example, some limits may be placed on thecommunications while in this state such as: communication may occur upto a maximum data transmitted/received amount or up to a maximum numberof days since the initial data communication. A test ready state mayhave no prerequisite state, have no limitation to a next state (e.g.,all states allowed as next state), have no exclusivity rule, be arequired state, and be allowed to have automatic and/or manualtransitions.

An inventory state can be used to allow a SIM to be placed in a deviceand associated with an identifier of the device (e.g., a terminalidentifier or a point of sale terminal identifier). An inventory statecannot coexist with an activation ready state. An inventory state cannotconnect with the network and requires a manual change in order to changestate. An inventory state may have a test ready state as a prerequisite,have no limitation to a next state (e.g., all states allowed as nextstate), have an exclusivity rule in that it cannot coexist with anactivation ready state, not be a required state, and be allowed only tohave manual transitions.

An activation ready state can be used to allow a SIM to be ready to beactivated. An activation ready state will authenticate and authorizewith the HLR and AAA server of the provider system, but no billing willoccur. After the first data communication (e.g., first packet dataprotocol (PDP) context communication), the SIM state may automaticallychange to an activated state. An activation ready state may have a testready state or inventory state as a prerequisite, have no limitation toa next state (e.g., all states allowed as next state), have anexclusivity rule in that it cannot coexist with an inventory state, notbe a required state, and be allowed to have an automatic transition toan activated state or a manual transition to other states.

An activated state can be used to allow a SIM, or a device with a SIM,to be used by a user. In an activated state the SIM will authenticateand authorize on the HLR and AAA server of the provider system. Billingcommences immediately on changing to this state. The provider system maycheck to make sure that the proper information is contained on theprovider system's HLR and AAA server databases as well as the billingdatabases. In some cases, the checks will include checking theidentifiers stored in the SIM (e.g., international mobile subscriberidentifier (IMSI), customer identifier, device identifier, etc.). Anactivated state may have a test ready state, inventory, or activationready state as a prerequisite, have possible next states of deactivated,purged, or retired, have no exclusivity rule, not be a required state,and be only allowed to have a manual transition to a next state.

A deactivated state can be used to allow a SIM, or a device with a SIM,to be deactivated by the user. In a deactivated state the SIM will notbe allowed to authenticate and will not be billed. The AAA server of theprovider system and the gateway GPRS support node (GGSN) of carriernetworks will be sent a notification (e.g., a packet) informing themthat the SIM has been deactivated. An deactivated state may have anactivated state as a prerequisite, have possible next states ofactivated, purged, or retired, have no exclusivity rule, not be arequired state, and be only allowed to have a manual transition to anext state.

A retired state can be used to allow a SIM, or a device with a SIM, tobe retired by the provider or the user. In a retired state the SIM willnot be allowed to authenticate and billing ends. A retired state mayhave any state as a prerequisite except purged, have any possible nextstates (i.e., all states possible), have no exclusivity rule, not be arequired state, and be only allowed to have a manual transition to anext state.

A purged state can be used to allow a SIM, or a device with a SIM, to bepurged by the provider. In a purged state the SIM will not be allowed toauthenticate and the subscriber identification is removed from thesystem (e.g., IMSI permanently removed from the HLR of the providersystem). A purged state may have any state as a prerequisite, have nopossible next states, have no exclusivity rule, not be a required state,and be not allowed to have any transitions to a next state.

In some embodiments, a state is defined by a customer. In someembodiments, the state is defined using an Internet-based service.

In some embodiments, a state definition does not support communicationsessions and a transition to that state will terminate existing opencommunication sessions.

In some embodiments, a first wireless communication provisioning stateallows a communication device to pass traffic without incurring anybilling charges, and an associated state transition rule allows anautomated transition to a second provisioning state where the secondprovisioning state incurs billing charges. In some embodiments, a firstwireless communication provisioning state allows a communication deviceto pass traffic without incurring any billing charges, and an associatedstate transition rule allows an automated transition to the secondprovisioning state, where the second provisioning state does not allowthe communication device to pass traffic.

In 802, state transition or allocation rule(s) between two states is/aredefined. A transition from one state to another may occur automaticallyon a predetermined condition or manually. If the transition is based ona condition is met (e.g., upon first data communication—packet dataprotocol context established), the state will automatically change fromone to another (e.g., activation ready state to activated state). Invarious embodiments, the transition condition is based on one or more ofthe following: a predetermined amount of elapsed time since a priorstate transition, an amount of service usage above a predeterminedamount of service usage, one or more service signalings, or any otherappropriate condition. In various embodiments, the condition is based onan exclusivity rule, a state rule, a communication data transfer, or anyother appropriate condition. A manual change from one state to anotherrequires an intervention directly from the provider system—for example,an action through a manager portal, by uploading a file to the SIM ordevice with the SIM, or an application programming interface (API) call.

In various embodiments, a state transition or allocation rule can bedefined for an individual device or a group of devices, or differentrules can be defined for different individual devices or differentgroups of devices, or any other appropriate combination as appropriatefor meeting the needs of a supplier of devices.

In some embodiments, a group of states are defined and a group oftransition/allocation rules are defined, and then a selection of statesand transition/allocation rules are associated with one or moreidentifiers.

In some embodiments, a customer selects a state transition/allocationrule. In some embodiments, a customer defines a statetransition/allocation rule. In various embodiments, the statetransition/allocation rule is selected and/or defined using anInternet-based service, using a local program interface, or any otherappropriate manner of selecting and defining a state transition rule.

In some embodiments, a state transition/allocation rule when activatedterminates existing communication sessions.

FIG. 9 is a block diagram illustrating an embodiment of a statedefinition. In some embodiments, a state is associated with anidentifier—for example, a SIM, a device identifier (e.g., aninternational mobile equipment identifier), a vendor identifier, or anyother appropriate identifier. In the example shown, a state definitionincludes state name, state description, required state flag,prerequisite state, allowed next state(s), exclusivity rule, andtransition mode(s) available that describe conditions allowingtransitions between states. For example, a test ready state has: a) astate name of test ready; b) a state description of SIM is able totested in its operation with the network by a manufacturer in a limitedmanner without being billed; c) a required state flag indicating thatthe test ready state is required; d) there is no prerequisite state forthe test ready state; e) allowed next states from test ready areinventory, activation ready, activated, retired, or purged; f) there isno exclusivity rule for the test ready state; and g) the transitionmodes available are automatic to either an inventory state or anactivation ready state based on an exclusivity rule or manual change.

FIG. 10 illustrates an embodiment of a state transition/allocation ruledefinition. In various embodiments, a state transition/allocation ruledefinition is associated with a state associated with an identifier oran identifier. In the example shown, a state transition/allocation ruledefinition includes current state, transition condition, statetransitioned to, and transition description. For example, a SIM can bemanually changed from an inventory state to an activation ready statewhen the device that the SIM is in is deployed by selling the unit to aretail customer, by having a service provider place the unit in thefield, or by any other appropriate manner. For another example, a SIMcan be automatically changed from an activation ready state to an activestate when a PDP context is established and data is communicated to andfrom the SIM, or device with the SIM in it.

FIG. 11 is a flow diagram illustrating an embodiment of states of achannel sale model for provisioning and the transitions between thestates. In some embodiments, the starting default state of a SIM is thetest ready state. In the example shown, in test ready state 1100 adevice is ready for testing. The SIM is shipped in the test ready stateto an original equipment manufacturer (OEM)—for example, a customerwanting to use the connectivity services provided by the provider whichenables a user's device to have data communication to the customer viaone or more carrier networks. In test ready state 1100, the SIM isallowed to provision and establish a PDP session (e.g., it can connectto GGSN of a carrier network, connect to internet, and connect to thecustomer's application server). When the SIM is in the test ready state,no billing to the OEM occurs. This connectivity is allowed for until thetransition 1101. Transition 1101 from the test ready state is either amanually triggered transition or an automatically triggered based on acondition where the condition is the when the SIM has reached: 1) amaximum number of PDP sessions has occurred—for example, 10; 2) amaximum amount of data has been transmitted/received to and from theSIM/device via the carrier network—for example, 100 Kbytes; or 3) amaximum amount of time has elapsed since the first PDP context in thistest ready state—for example, 90 days. When the transition is triggered,then the SIM switches to inventory state 1102.

In inventory state 1102, a device is waiting to be transferred to auser. In this state, no connectivity is enabled, and no billing occurs.The state is maintained until transition 1103. Transition 1103 occurswhen the OEM or the customer or its channel service providers manuallytriggers a state change. When the state change is triggered, the SIM ischanged to activated state 1104. In activated state 1104, a device isbeing used by user. In activated state 1104, the SIM is able toestablish a PDP session and connect and transfer data to a customerapplication server via a carrier network. The user is billed for theservice provided by the provider. Billing information is provided to thecustomer by gathering the relevant data from the network carriers andthe provider's data bases. The SIM remains in the active state untiltriggered to transition. Transition 1105 may be triggered manually orautomatically. In various embodiments, transition 1105 is triggeredautomatically by a maximum number of connections allowed, a maximumamount of data transferred, a maximum amount of time since the start ofPDP sessions, or any other appropriate automatic trigger condition. Insome embodiments, the user or the customer can also manually triggertransition 1105 to a deactivated state 1106.

In deactivated state 1106, a device is finished being used as requestedby an end user or by a customer system request by being in a deactivatedstate. In deactivated state 1106, the SIM is not able to connect andestablish a PDP session. While in deactivated state 1106, there is nobilling for connectivity. Transition 1107 can be triggered automatically(e.g., after a period of time) or manually (e.g., by the customer). Whentransition 1107 is triggered, the SIM changes state to purged state1108. In purged state 1108, the SIM and the device the SIM is in, isremoved from the system. In purged state 1108, the SIM is not able toconnect and establish a PDP session. There is no billing associated withthe trigger or the state. Accounting for the customer may remove theitem from inventory or asset lists. Purged state 1108 automaticallyremoves the IMSI and International Circuit Card Identifier (ICCID) fromthe HLR of the provider system.

FIG. 12 is a flow diagram illustrating an embodiment of states of aretail sale model for provisioning and the transitions between thestates. The states and transitions in FIG. 12 are similar to the statesand transitions in FIG. 11 except for the activation ready state. Insome embodiments, the starting default state of a SIM is the test readystate. In the example shown, in test ready state 1200 a device is readyfor testing. The SIM is shipped in the test ready state to an originalequipment manufacturer (OEM)—for example, a customer wanting to use theconnectivity services provided by the provider which enables a user'sdevice to have data communication to the customer via one or morecarrier networks. In test ready state 1200, the SIM is allowed toprovision and establish a PDP session (e.g., it can connect to GGSN of acarrier network, connect to internet, and connect to the customer'sapplication server). When the SIM is in the test ready state, no billingto the OEM occurs. This connectivity is allowed for until the transition1201. Transition 1201 from the test ready state is either a manuallytriggered transition or an automatically triggered based on a conditionwhere the condition is the when the SIM has reached: 1) a maximum numberof PDP sessions has occurred—for example, 5; 2) a maximum amount of datahas been transmitted/received to and from the SIM/device via the carriernetwork—for example, 1 Mbytes; or 3) a maximum amount of time haselapsed since the first PDP context in this test ready state—forexample, 1 year. When the transition is triggered, then the SIM switchesto activation ready state 1202.

In activation ready state 1202, a device is waiting to be transferred toa user. In various embodiments, the activation ready state is set aftertesting by the OEM when the device is being shipped from the OEM toretail locations, distribution partners, directly to end users, or whenthe SIM, or device with the SIM, is about to be in the end users handsbut is not ready to have billing/service fully implemented. In thisstate, SIM connectivity is enabled, and a PDP session can beestablished. Upon the first PDP session occurring transition 1203 istriggered. When the state change is triggered, the SIM is changed toactivated state 1204. In activated state 1204, a device is being used byuser. In activated state 1204, the SIM is able to establish a PDPsession and connect and transfer data to a customer application servervia a carrier network. The user is billed for the service provided bythe provider. Billing information is provided to the customer bygathering the relevant data from the network carriers and the provider'sdata bases. The SIM remains in the active state until triggered totransition. Transition 1205 may be triggered manually or automatically.In various embodiments, transition 1205 is triggered automatically by amaximum number of connections allowed, a maximum amount of datatransferred, a maximum amount of time since the start of PDP sessions,or any other appropriate automatic trigger condition. In someembodiments, the user or the customer can also manually triggertransition 1205 to a deactivated state 1206.

In deactivated state 1206, a device is finished being used as requestedby an end user or by a customer system request by being in a deactivatedstate. In deactivated state 1206, the SIM is not able to connect andestablish a PDP session. While in deactivated state 1206, there is nobilling for connectivity. Transition 1207 can be triggered automatically(e.g., after a period of time) or manually (e.g., by the customer). Whentransition 1207 is triggered, the SIM changes state to purged state1208. In purged state 1208, the SIM and the device the SIM is in, isremoved from the system. In purged state 1208, the SIM is not able toconnect and establish a PDP session. There is no billing associated withthe trigger or the state. Accounting for the customer may remove theitem from inventory or asset lists. Purged state 1208 automaticallyremoves the IMSI and International Circuit Card Identifier (ICCID) fromthe HLR of the global platform provider system.

FIG. 13 is a flow diagram illustrating an embodiment of a process forprovisioning wireless communication. In the example shown, in 1300definitions for states associated with an identifier are received. Insome embodiments, state definitions and/or selections are received usingan internet-based application. In various embodiments, state definitionsare the same or different for different identifiers. In variousembodiments, a state for provisioning (e.g., a device) allows billing,allows communication sessions, allows activation, does not allowbilling, does not allow communication sessions, does not allowactivation, or any other appropriate action associated with a state. In1302, definition(s) for state transition rule(s) between two statesis/are received. In some embodiments, state transition rule/allocationdefinitions and/or selections are received using an internet-basedapplication. In various embodiments, the transitions are automatic ormanual and are triggered with a transition condition. In variousembodiments, the automatic and/or manual transition conditions includean elapsed time from a prior state, prior transition, or priorspecific/any communication, an absolute time, an absolute date, after apredetermined amount of traffic, before a predetermined level of trafficis reached, after communication with a specific location, number,device, service center, after sending a service indication, a systemmessage, after receipt of a service message, condition, communicationfrom a specific location, device, server, service center, or any otherappropriate transition condition. In 1304, it is determined if atransition condition associated with a transition rule for current stateis met. In the event that an appropriate transition condition has notbeen met, control stays with 1304. In the event that an appropriatetransition condition is met, then in 1306 allow transition between thetwo states as appropriate for the transition rule. In some embodiment,the implementation of provisioning states, state transition ruleenforcement, and evaluation of transition conditions takes place on aserver that communicates with a wireless network and wireless device. Inone embodiment, the server is located in, or otherwise operated by, aglobal platform provider's control center.

A Global Platform for Managing Subscriber Identity Modules

A global platform for managing subscriber identity modules (SIMs) ofwireless devices is described. The global platform provides a businesssupport system (BSS) and operational support system (OSS) for a widerange of network carriers that may be operating in different countriesor continents. The global platform allows partner carriers to deliverwireless communication services to the customers in a seamless way tothe customers regardless of their geographical locations. Through analliance agreement that each partner carrier enters with the globalplatform provider, a mobile device purchased from one partner carriercan freely move to an area (e.g., country or continent) operated byanother partner carrier while incurring minimal (if any) performanceimpacts and roaming charges.

As described herein a mobile device may be a cell phone, an eBook, anautomobile with wireless tracking ability, a digital picture frame, agame console, a tablet computer, a laptop computer, or other portablewireless communication devices. Further, the customers described hereinmay be an end consumer, an organization or an enterprise that has aninterest in the global deployment of network-connected devices. In aconventional wireless system, the operation of every network carrier isbound by the country. Thus, a device (e.g., an automobile) purchased inone country cannot be easily shipped to another country withoutincurring permanent roaming charges in that other country. Further,since the automobile is roaming in the other country, its data trafficwill be routed through its home network for both inbound and outboundsignals and data transmission. This routing has a negative performanceimpact on the wireless communication. The global platform describedherein allows such deployment to happen with minimal (if any) impact onthe performance and roaming charges.

FIG. 14A is an embodiment of a wireless network architecture in which aglobal platform provider operates. The global platform provider isallocated with a set of multiple subscriber identifiers, such as theinternational mobile subscriber identifier (IMSIs). Although IMSI isused in the following description, it is understood that othersubscriber identifier types can be used instead of IMSI. Moreover,although the wireless network architecture is described in the contextof 2/3G Global System for Mobile Communication (GSM) network technology,it is understood that other network technologies, such as Code DivisionMultiple Access 2000 (CDMA2000), 4G Long Term Evolution (LTE), LTEAdvanced, etc., can be used to support the techniques described herein.It is also understood that embodiments of the invention can be adaptedto work with future versions of the network protocols, technologies andstandards as these protocols, technologies and standards develop.

A mobile device 1410 having one of these IMSIs programmed in its SIM canavoid or reduce its roaming charges in regions that are operated bynetwork carriers partnered with the global platform provider. The mobiledevice 1410 may incur temporary roaming charges after leaving its homenetwork and entering a partner carrier network (e.g., partner carriernetwork 1480 or 1490). However, at some point in time when one or morepre-determined allocation rules are satisfied, the mobile device 1410can be provisioned with a new IMSI that is local to the partner carriernetwork or an IMSI that is predetermined by the global platform providerto be preferred for that visited country. With this new IMSI, the mobiledevice can transmit and receive wireless packets in the partner carriernetwork without incurring roaming charges and without having thetransmissions routed through its home network.

The determination of whether the mobile device 1410 can switch to alocal or otherwise preferred IMSI can be made by a control center 1420based on a set of allocation rules. The control center is coupled to aglobal platform provider network 1400 and includes at least aprovisioning server 1450 and an over-the-air (OTA) server 1440. Both thecontrol center 1420 and the global platform provider network 1400 areoperated by the global platform provider. The control center 1420 andthe global platform provider network 1400 can include multiple servers,multiple storage devices and multiple network nodes distributed acrossmultiple geographical areas.

In one embodiment, the global platform provider network 1400 includes aHome Location Register (HLR) 1430 that includes one or more servers anddatabases for managing and storing mobile subscriber information. Themobile subscriber information includes the International MobileSubscriber Identity (IMSI), the MSISDN, location information (e.g., theidentity of the currently serving Visitor Location Register (VLR) toenable the routing of mobile-terminated calls) and service subscriptionand restrictions. The HLR 1430 is coupled to an authentication center(AuC) 1431 for performing authentication of a mobile device thatrequests a network connection.

The HLR 1430 is operated and updated by the global platform provider.The HLR 1430 communicates with the partner carrier networks (1480, 1490)via Signaling System 7 (SS7) messages through Signal Transfer Points(STPs) (1471, 1472), or via Internet Protocol (IP) messages throughMobility Management Entities (MMEs). The SS7/IP messages can be sent viadedicated SS7/IP connections and/or SS7/IP inter-carrier networks 1441.In some embodiments, the HLR 1430 shown herein is a logicalrepresentation. Physically, the HLR 1430 can be distributed acrossmultiple geographical areas. In some embodiments, the HLR 1430 caninclude distributed segments of the HLRs owned by multiple partnercarriers. Thus, in these embodiments the HLR 1430 can be the sum ofmultiple HLR segments, with each HLR segment owned by a differentpartner carrier. For example, a partner carrier may own and operate anHLR, and a segment of the HLR can be read and updated by the globalplatform provider. The updates performed by the global platform providercan include adding/provisioning and removing/purging IMSIs, and settingand editing subscriber wireless service permissions. The IMSIs that canbe added and removed by the global platform provider are within a set ofIMSIs that are allocated to the global platform provider. That is, theHLR 1430 stores and manages the IMSIs that belong to the set of IMSIsallocated to the global platform provider. In one embodiment, when a newIMSI is provisioned to a subscriber, the subscriber may also be changedto a new billing account owner. That is, the contractual ownership forthe subscriber's wireless service may change with the provision of a newIMSI. After the provision of a new IMSI, the subscriber may receive abilling statement from a new partner carrier in addition to or insteadof the original carrier.

In the embodiment of FIG. 14A, each of the partner carrier networks(1480, 1490) includes one or more MSCs (1485, 1487) and one or moreSGSNs (1415, 1417). The MSCs (1485, 1487) are responsible for routingcircuit-switched voice calls, fax, data and short message service (SMS).The MSCs (1485, 1487) can forward outgoing circuit-switched signals froma mobile device to a circuit-switched network (not shown), and canforward outgoing short messages to an SMS center (SMSC) 1460. Thecircuit-switched network and the SMSC 1460 then deliver thesignals/messages to their intended destinations. In addition, the MSCs(1485, 1487) are responsible for requesting the HLR 1430/AuC 1431 toauthenticate a mobile device when the mobile device requests for anetwork connection.

The SGSNs (1415, 1417) are responsible for routing data packets. EachSGSN (1415, 1417) is identified by an Access Point Name (APN), which canbe used in a Domain Name System (DNS) query to resolve the IP address ofa GGSN (e.g., GGSN 1416) that serves the SGSN (1415, 1417). The APNresolution function is shown as the APN DNS (1465, 1467). The GGSN 1416then delivers outgoing data packets from the mobile device 1410 to theirdestination(s) via a packet-switched network (e.g., the Internet).Before granting access to the packet-switched network, the GGSN 1416 canuse Remote Authentication Dial In User Service (RADIUS) protocol toprovide Authentication, Authorization, and Accounting (AAA) management(shown as RADIUS 1418). For incoming data packets destined for themobile device 1410, the GGSN 1416 resolves the IP address of thedestination SGSN using the SGSN's APN in a DNS query (shown as the APNDNS 1466). The communication between the SGSN (1415, 1417) and the GGSN1416 can be provided by a GPRS roaming exchange (GRX) network 1442 forinter-carrier connections. In some embodiments, the communicationbetween the SGSN (1415, 1417) and its associated GGSN can be provided byan intra-carrier connection.

In the embodiment of FIG. 14A, the HLR 1430, the SMSC 1460, the GGSNs1416 and the RADIUS 1418 are within the global platform provider network1400. In alternative embodiments, one or more of the HLR 1430, the SMSC1460, the GGSNs 1416 and the RADIUS 1418 can be located within andoperated by one or more of partner carrier networks (1480, 1490).Regardless of their locations and ownership, the control center 1420 hasaccess to each of the HLR 1430, the SMSC 1460, the GGSNs 1416 and theRADIUS 1418 to manage the information of the mobile subscribers, whodirectly or indirectly (e.g., through a partner carrier, or through acustomer organization having a contract with a partner carrier or withthe global platform provider) subscribes to the service of the globalplatform provider.

In some embodiments, the IMSIs allocated to the global platform providerbelong to a set of IMSIs that contain one or more contiguous ornon-contiguous segments of IMSIs. An IMSI is a unique non-dialablenumber allocated to each mobile device in the GSM system. The IMSI isstored in the SIM of a mobile device and uniquely identifies asubscriber identity. Generally, an IMSI includes three parts: (1) themobile country code (MCC) consisting of three digits for identifying acountry, (2) the mobile network code (MNC) consisting of two or threedigits for identifying a network carrier, and (3) the mobile subscriberidentity number (MSIN) consisting of nine to ten digits.

In one embodiment, the IMSIs allocated to the global platform providercan have an MCC and an MNC that identify a country and one of thepartner carrier networks, as well as an MSIN that includes one or moredigits having one or more pre-designated values. As an example, supposethat the MCC “123” and the MNC “956” identify a country and a partnercarrier network “PN” operated within that country, respectively. Furthersuppose that the partner carrier agrees that among all of the IMSIsidentifying the partner carrier network “PN”, those IMSIs with the firstdigit of the MSIN being 9 (or any other pre-designated value) areallocated to the global platform provider. Thus, the IMSI123-456-9xxxxxxxx indicates a range of IMSIs allocated to the globalplatform provider, with “x” being any value from 0-9. This range ofIMSIs can be provisioned by the control center 1420 to mobile devicesthat roam into the partner carrier network “PN” and need to be switchedto local or otherwise preferred IMSIs. Since the global platformprovider can enter into agreements with multiple partner carriers, theIMSIs allocated to the global platform provider can include manydisjoint ranges.

The MISN is to be distinguished from the Mobile Station InternationalSubscriber Directory Number (MSISDN). The MSISDN is a dialable numberthat a caller uses to reach a mobile device. Generally, the HLR storesthe IMSI and the MSISDN as a pair for identifying a mobile subscriber'sdevice and for routing calls to the mobile subscriber. A SIM is uniquelyassociated to an IMSI, while the MSISDN can change in time (e.g. due toportability of phone numbers).

When a network carrier orders mobile devices from its equipmentsuppliers, the equipment suppliers typically pre-program each SIM in themobile device with one or more IMSIs. In one embodiment, thepre-programed SIM includes a bootstrap IMSI, which is one of the IMSIsallocated to the global platform provider. This bootstrap IMSI alsoidentifies a country and a carrier network that is the home to thepre-programmed SIM. When an end user purchases a mobile device throughany partner carrier channel, the service representative creates aservice order to enter the end user's subscription information,including the MSISDN, using the bootstrap IMSI as a key. This serviceorder with the key is submitted to the control center 1420, whichcreates a subscription record that uses the bootstrap IMSI as the key,and adds the subscription record to the HLR 1430. The mobile device canthen start wireless communications using the bootstrap IMSI within itshome network or a partner carrier network.

FIGS. 14B and 14C are two examples of IMSI switching according toembodiments of the invention. Referring to FIG. 14B, when the mobiledevice 1410 roams from its home network (e.g., in Canada) to a visitednetwork (e.g., in Germany), it can be provisioned with a new IMSI by theglobal platform provider. For example, suppose that local IMSIs 1491 ofthe home network in Canada are (111-222-MSIN) and local IMSIs 1492 ofthe visited network in Germany are (333-444-MSIN), where MSIN representsany 9-10 digital number. In one embodiment, when the mobile device 1410roams from Canada to Germany, the mobile device 1410 can be provisionedwith a new IMSI that is one of the local IMSIs 1492 in Germany allocatedto the global platform provider. In another embodiment, when the mobiledevice 1410 roams from Canada to Germany, the mobile device 1410 can beprovisioned with a new IMSI that is one of the local IMSIs 1493 in Spain(e.g., 555-666-MSIN) allocated to the global platform provider. This newIMSI (one of the local IMSIs 1493) is herein referred to as a“preferred” IMSI for the visited network. The provision of a preferredIMSI may occur if; e.g., the global platform provider has an agreementwith the Spanish network carrier to allocate its IMSIs 1493 to roamingdevices in Germany that have subscribed to the service of the globalplatform provider.

In the example shown in FIGS. 14B and 14C, the MSIN portion of the IMSIbefore and after roaming is the same (e.g., 987654321) wherein theleading digit “9” indicates that the IMSI is allocated to the globalplatform provider. However, it is understood that the global platformprovider can provision another available MSIN that is different from987654321 to its roaming devices.

FIG. 15 illustrates an overview of IMSI provisioning and management.Initially, a mobile device with a bootstrap IMSI 1511 is deployed fromits home network to a deployed location. The home network is identifiedby the mobile country code (MCC) and the mobile network code (MNC) ofthe bootstrap IMSI 1511. The deployed location, which is in a networkoperated by one of the partner carriers or operated by one of thepartner carriers' roaming carrier partners, may be associated with adifferent MCC and/or MNC from those of the home network. Based on a setof allocation rules 1510, the control center 1420 determines whether thebootstrap IMSI 1511 should be replaced by a new IMSI that is local to orotherwise preferred for the deployed location. Examples of theallocation rules 1510 can include: the amount of mobile usage, theamount of billable mobile usage, the first network registration attempton a roaming network, the length of time that the mobile device has beenroaming, the subscription status (e.g., the level of priority), thenumber of available IMSIs, the agreement with the network carrier forthe deployed location, and the like.

Specific examples of allocation rules 1510 may include that theallocation rule specifies that a new or second one of the IMSIs isselected based on an initial network registration of the first IMSI(e.g. bootstrap IMSI 1511) and/or in an activation ready state or anactivated state. A second one of the IMSIs is selected based on acountry of an initial network registration and/or in an activated state.A second one of the IMSIs is selected based on a first networkregistration of the first IMSI with a CDR. A second one of the IMSIs isselected based on a first network registration of the first IMSI with aCDR and/or in an activated state. A second one of the IMSIs is selectedbased on a first network registration of the first IMSI with a firstbillable CDR in a first billing cycle. A second one of the IMSIs isselected based on a first network registration of the first IMSI with alast billable CDR in a first billing cycle. A second one of the IMSIs isselected based on a first network registration of the first IMSI with x% billable volume in a first billing cycle.

If an IMSI replacement should be made, the control center 1420 triggersIMSI switching by having the OTA 1440 send the new IMSI to the mobiledevice, and by adding/provisioning the new IMSI to the HLR 1430 andremoving/purging the bootstrap IMSI from the HLR 1430.

With the new IMSI, the mobile device can communicate wirelessly in thedeployed location as if it were operating within its home network or asan otherwise preferred roaming network. Incoming and outgoing mobiletransmissions may be managed by the local partner carrier networkwithout being re-routed to the home network. In one embodiment, thecontrol center 1420 can monitor the network usage and collect billinginformation. The billing information can be forwarded to the localpartner carrier or preferred home network partner, which generates aninvoice for account settlement. The invoice will be sent to the end useror a customer organization 1550 through which the end user subscribes tothe mobile communication service. In an alternative embodiment, thecontrol center 1420 can generate the invoice based on the collectedbilling information.

In the following description with reference to FIGS. 16-20, a number ofexamples illustrating the process of IMSI switching are described. Toavoid obscuring the description, some of the signaling paths and networkelements are omitted from FIGS. 16-20. Some of the network elementsshown in FIGS. 16-20 refer back to FIG. 14A. However, it is understoodthat the processes illustrated in FIGS. 16-20 may be implemented by anetwork architecture different from the embodiment of FIG. 14A. Further,to simplify the discussion, the following examples only describe 2/3GGSM packet-based routing. It is understood that other types of wirelessdata, such as messaging, voice calls, faxes, and other types of wirelesscommunications can also be supported as well as other wirelesstechnologies such as 4G LTE or LTE Advanced. In the followingdescription, bracketed numerals are associated with actions whileun-bracketed numerals are associated with entities or data items (e.g.,IMSIs).

FIG. 16 illustrates an embodiment of a process for initial networkregistration of a mobile device having a bootstrap IMSI (e.g., thebootstrap IMSI 1511). Initially, the mobile device is installed with aSIM programmed with the bootstrap IMSI 1511. The bootstrap IMSI 1511 isthe key to a subscription record in the HLR 1430 operated, or otherwiseaccessible, by the global platform provider. As described above, thebootstrap IMSI 1511 can be assigned to the mobile device by an equipmentsupplier, and is within the range(s) of IMSIs allocated to the globalplatform provider. Upon receiving a service order, the provisioningserver 1450 adds the bootstrap IMSI 1511 into the HLR 1430, as well asother subscription information in a subscription record that uses thebootstrap IMSI 1511 as the key (1601). The HLR 1430 then indicates theIMSI as activated. When the mobile device sends a request for a wirelessnetwork connection, the request is first sent to the nearest basestation (BS) tower 1612 operated by the home network carrier (e.g., thecarrier identified by the bootstrap IMSI as the home network carrier)(1602) or visited network carrier. The BS tower 1612 forwards therequest to a nearest MSC 1681, which sends an authentication request tothe HLR 1430/AuC 1431 for the mobile device (1603). The HLR 1330/AuC1431 then authenticates the bootstrap IMSI 1511. Upon authentication,the BS 1612 routes data packets from the mobile device to an SGSN 1615operated by the serving network carrier, which forwards the data packetsto the GGSN 1416 (1604). Before granting access to the external network(e.g., the Internet 1660), the GGSN 1416 requests authorization andauthentication from the Radius 1418 (1605). Upon receipt ofauthorization and authentication, the GGSN 1416 routes the data packetsto the Internet 1660 (1606). The global platform provider then collectsnetwork usage information (e.g., call detail records (CDRs)) from theGGSN 1416 or Radius 1418 and stores in a usage and rating database 1621.

FIG. 17 illustrates a process for performing IMSI switching. In thiscase, the mobile device with a bootstrap IMSI 1511 is deployed to acountry/network that is foreign to the bootstrap IMSI 1511 (i.e., theSIM is roaming) (1701). In one embodiment, the first carrier can be apartner carrier operating the partner carrier network 1480 of FIG. 14A.At this point, the bootstrap IMSI 1511 remains actively provisioned inthe HLR 1430. The mobile device sends a registration request to thenearest BS tower 1712 (1702), which forwards the request to the MSC 1485and a VLR 1770 associated with the MSC 1485 (1703). Both the MSC 1485and the VLR 1770 are operated by the first carrier. The VLR 1770 informsthe HLR 1430 that the mobile device has roamed away from its homenetwork, and obtains subscription information of the mobile device fromthe HLR 1430 (1704). The mobile device then registers in the newlydeployed location via roaming.

The notification from the VLR 1770 triggers the provisioning server 1450to check allocation rules 1510 to determine whether the mobile deviceshould be switched to a local or otherwise preferred new IMSI (e.g., afirst IMSI 1711 local to the first carrier network) (1605). This localIMSI 1711 is also within a range of IMSIs allocated to the globalplatform provider. By using the first IMSI 1711 in the deployedlocation, the mobile device can communicate wirelessly without beingtreated as a roaming device. Additionally, as the first IMSI 1711 isallocated to the global platform provider, the global platform providercan monitor the signaling or usage of the mobile device to determinewhether there is a need to perform further IMSI switching.

If the provisioning server 1450 determines that an IMSI switching shouldbe performed based on the allocation rules 1510, the provisioning server1450 directs the OTA server 1440 to send the first IMSI 1711 to themobile device (1706). The first IMSI 1711 can be sent by encryptedtransmission (e.g., an encrypted SMS) (1707). Upon receipt of the firstIMSI 1711, the mobile device changes its profile in the SIM and returnsa receipt to the OTA server 1440. The provisioning server 1450 alsoupdates the HLR 1430 by adding/provisioning and activating the firstIMSI 1711 to the mobile device's subscription record. When the mobiledevice re-registers on the first carrier's network with the new IMSI1711 via the HLR 1430, the HLR 1430 will send a message to theprovisioning server 1450 that the mobile device has successfullyregistered with the new IMSI 1711. At this point, the provisioningserver 1450 will remove the bootstrap IMSI 1511 from the HLR 1430(1708).

FIG. 18 illustrates an embodiment of a process for operating the mobiledevice after the IMSI switching described in FIG. 17. As described inFIG. 17, the HLR 1430 adds and activates the first IMSI 1711 and removesthe bootstrap IMSI 1511 as directed by the provisioning server 1450(1801). When the mobile device sends a request for a network connectionto the nearest BS tower 1712 (1802), the BS tower 1712 forwards therequest to the MSC 1485 operated by the first carrier. The MSC 1485recognizes that the request is associated with the first IMSI 1711,which is a local IMSI to the first carrier network. The MSC 1485 thensends an authentication request to the HLR 1330 (1803). In response, theHLR 1430 authenticates the first IMSI 1711. Upon authentication, the BStower 1712 routes data packets from the mobile device to the SGSN 1415operated by the first carrier, which forwards the data packets to a GGSN1816 associated with the SGSN 1415. Before granting access to anexternal network (e.g., the Internet 1660), the GGSN 1816 requestsauthorization and authentication from the Radius 1418 (1804). Uponreceipt of authorization and authentication, the GGSN 1816 routes thedata packets from the mobile device to the Internet 1660 (1805). In thisexample, as the GGSN 1816 is operated by the first carrier, it is thefirst carrier that provides the CDRs and accounting to the usage andrating database 1621 operated by the global platform provider (1807). Inother embodiments, the Radius server 1418 may provide the CDRs andaccounting to the usage and rating database 1621.

FIG. 19 illustrates an embodiment of a process for operating the mobiledevice as a roaming device after the IMSI switching described in FIG.17. After the mobile device is successfully switched to the first IMSI1711 and operating in the first carrier network as a local mobiledevice, the mobile device roams to another location serviced by a secondcarrier (1901). In one embodiment, the second carrier can be a partnercarrier operating the partner carrier network 1490 of FIG. 14A. At thispoint, the first IMSI 1711 remains in the HLR 1430. The mobile devicesends a registration request to the nearest BS tower 1912 (1902), whichforwards the request to the MSC 1487 and a VLR 1970 associated with theMSC 1487. Both the MSC 1487 and the VLR 1970 are operated by the secondcarrier. The VLR 1870 informs a HLR 1930 of the first carrier networkthat the mobile device has enters the second carrier network, andrequest authentication of the mobile device (1903). The HLR 1930forwards the authentication request to the HLR 1430 of the globalplatform provider network 1400, and the HLR 1430 authenticate the mobiledevice (1904). The mobile device then registers and activates in the newlocation via roaming. In some embodiments, the VLR 1970 will send theauthentication request directly to the HLR 1430 of the global platform

Upon authentication, the BS tower 1912 routes data packets from themobile device to the SGSN 1417 operated by the second carrier. The SGSN1417 forwards the data packets to the GGSN 1816 operated by the firstcarrier (1905). Before granting access to an external network (e.g., theInternet 1660), the GGSN 1816 requests authorization and authenticationfrom the Radius 1418 (1906). Upon receipt of authorization andauthentication, the GGSN 1816 routes the data packets to the Internet1660 (1907). In this example, as the GGSN 1816 is operated by the firstcarrier, it is the first carrier that provides the CDRs and accountingto the usage and rating database 1621 operated by the global platformprovider (1908). In other embodiments, the Radius server 1418 mayprovide the CDRs and accounting to the usage and rating database 1621.

FIG. 20 illustrates an embodiment of a process for performing anotherIMSI switching. The process of 2001-2004 of FIG. 20 is similar to1901-1904 of FIG. 19, and is therefore not repeated. In response to theauthentication request from the first carrier's HLR 1930, theprovisioning server 1450 checks allocation rules 1510 to determinewhether the mobile device should be switched to a local IMSI (that is, asecond IMSI 2011 local to the second carrier network) (2005). Further,the second IMSI 2011 is within a range of IMSIs allocated to the globalplatform provider. By using the second IMSI 2011 in the deployedlocation, the mobile device can communicate wirelessly without beingtreated as a roaming device. Additionally, as the second IMSI 2011 isallocated to the global platform provider, the global platform providercan monitor the usage of the mobile device to determine whether there isa need to perform further IMSI switching.

If the provisioning server 1450 determines that an IMSI switching shouldbe performed based on the allocation rules 1510, the provisioning server1450 directs the OTA server 1440 to send the second IMSI 1911 to themobile device (2006). The second IMSI 2011 can be sent by encryptedtransmission (e.g., an encrypted SMS) (2007). Upon receipt of the secondIMSI 2011, the mobile device changes its profile in the SIM and returnsa receipt to the OTA server 1440. The provisioning server 1450 alsoupdates the HLR 1430 by adding/provisioning and activating the secondIMSI 2011 to the subscription record of the mobile device and byremoving/purging the first IMSI 1711 from the HLR 1430 (2008).

As described herein, the processes performed by the provisioning server1450, the OTA server 1440, the HLR 1430 and other network elements shownin FIGS. 14-20 may be implemented by specific configurations of hardwaresuch as application specific integrated circuits (ASICs) configured toperform certain operations or having a predetermined functionality, orelectronic devices executing software instructions stored in memoryembodied in a non-transitory computer readable storage medium. Examplesof non-transitory computer-readable storage media include: magneticdisks; optical disks; random access memory; read only memory; flashmemory devices; phase-change memory, and the like. In addition, suchelectronic devices typically include a set of one or more processorscoupled to one or more other components, such as one or more storagedevices (non-transitory machine-readable storage media), userinput/output devices (e.g., a keyboard, a touchscreen, and/or adisplay), and network connections. The coupling of the set of processorsand other components is typically through one or more busses and bridges(also termed as bus controllers). Thus, the storage device of a givenelectronic device typically stores code and/or data for execution on theset of one or more processors of that electronic device. One or moreparts of an embodiment of the invention may be implemented usingdifferent combinations of software, firmware, and/or hardware.

Although the foregoing embodiments have been described in some detailfor purposes of clarity of understanding, the invention is not limitedto the details provided. There are many alternative ways of implementingthe invention. The disclosed embodiments are illustrative and notrestrictive.

What is claimed is:
 1. A system operative to communicate with aplurality of wireless networks and a plurality of mobile devices, witheach of the wireless networks operated by a different carrier, thesystem comprising: a home location register (HLR) to store at least onesubscription record of a mobile device of the plurality of mobiledevices, the mobile device having a subscriber identity module (SIM)identified by a currently activated first international mobilesubscriber identity (IMSI), the currently activated first IMSI belongingto a set of IMSIs allocated to the system; and a provisioning server tostore at least one account subscription record including a first billingaccount owner associated with an account contract, the first IMSI beingassociated with the first billing account owner, wherein theprovisioning server is operative to: receive a notification that themobile devices has moved into a first one of the wireless networks;confirm that an allocation rule is satisfied; add and activate a secondone of the IMSIs in the set of IMSIs to the HLR and remove the currentlyactivated first IMSI from the HLR; modify the at least one accountsubscription record to add a second billing account owner associatedwith the account contract, the second billing account owner beingassociated with the second IMSI; and send the second IMSI to the mobiledevice to enable the mobile device to communicate wirelessly in thefirst wireless network as a local device or a roaming subscriber with anew IMSI.
 2. The system of claim 1, wherein the HLR manages the set ofIMSIs, and wherein the set of IMSIs include multiple subsets with eachof the subsets including the IMSIs that have a different mobile countrycode and different mobile network code.
 3. The system of claim 1,wherein each IMSI in the set of IMSIs includes a mobile country code(MCC) and a mobile network code (MNC) that identify one of the wirelessnetworks, and a mobile subscriber identity number (MSIN) that includesone or more digits having one or more pre-designated values to identifythe IMSI as being allocated to the system.
 4. The system of claim 1,wherein a contractual ownership for the account contract changes fromthe first billing account owner to the second billing account owner upona provision of the second IMSI, and after the provision of the secondIMSI, a subscriber will receive a billing statement from a new carrier.5. The system of claim 4, wherein the HLR is distributed among theplurality of wireless networks as a plurality of HLR segments, at leastone of the HLR segments belongs to a carrier-operated HLR that isoperated by a carrier of one of the wireless networks, thecarrier-operated HLR being readable and writable by the provisioningserver under an agreement between the carrier and a provider of thesystem.
 6. The system of claim 1, wherein the wireless networks arelocated in multiple countries.
 7. The system of claim 1, wherein theallocation rule is based on an agreement between a provider of thesystem and a carrier of the first wireless network.
 8. The system ofclaim 1, wherein the allocation rule specifies that the second one ofthe IMSIs is selected based on an initial network registration of thefirst IMSI in a test ready state, inventory state, activation readystate or an activated state.
 9. The system of claim 1, wherein theallocation rule specifies that the second one of the IMSIs is selectedbased on a country of an initial network registration in a test readystate, inventory state, activation ready state or activated state. 10.The system of claim 1, wherein the allocation rule specifies that thesecond one of the IMSIs is selected based on a first networkregistration of the first IMSI and a CDR.
 11. The system of claim 1,wherein the allocation rule specifies that the second one of the IMSIsis selected based on a first network registration of the first IMSI anda CDR in a test ready state, inventory state, activation ready state oractivated state.
 12. The system of claim 1, wherein the allocation rulespecifies that the second one of the IMSIs is selected based on a firstnetwork registration of the first IMSI and a first billable CDR in afirst billing cycle.
 13. The system of claim 1, wherein the allocationrule specifies that the second one of the IMSIs is selected based on afirst network registration of the first IMSI and a last billable CDR ina first billing cycle.
 14. The system of claim 1, wherein the allocationrule specifies that the second one of the IMSIs is selected based on afirst network registration of the first IMSI and a defined percentage ofbillable data volume in a first billing cycle.
 15. The system of claim1, wherein the allocation rule specifies that the second one of theIMSIs is selected based on a first network registration of the firstIMSI and after a defined number of consecutive billable months of usage.16. The system of claim 1, wherein the allocation rule specifies atleast one of an amount of mobile usage, a length of time that the mobiledevice has been roaming, a subscription status, a number of availableIMSIs, an agreement with the network carrier for a deployed location.17. A method to communicate within a system including a plurality ofwireless networks and a plurality of mobile devices, with each of thewireless networks operated by a different carrier, the methodcomprising: storing in a home location register (HLR) at least onesubscription record of a mobile device of the plurality of mobiledevices, the mobile device having a subscriber identity module (SIM)identified by a currently activated first international mobilesubscriber identity (IMSI), the currently activated first IMSI belongingto a set of IMSIs allocated to the system; and storing in a provisioningserver at least one account subscription record including a firstbilling account owner associated with an account contract, the firstIMSI being associated with the first billing account owner, wherein theprovisioning server is operative to: receive a notification that themobile devices has moved into a first one of the wireless networks;confirm that an allocation rule is satisfied; add and activate a secondone of the IMSIs in the set of IMSIs to the HLR and remove the currentlyactivated first IMSI from the HLR; modify the at least one accountsubscription record to add a second billing account owner associatedwith the account contract, the second billing account owner beingassociated with the second IMSI; and send the second IMSI to the mobiledevice to enable the mobile device to communicate wirelessly in thefirst wireless network as a local device or a roaming subscriber with anew IMSI.